This phishing message tries to trick recipients into approving fraudulent Duo push notifications. The sender claims to be verifying an account or appointment and asks the recipient to “accept any Duo Push Notification Request” they receive today, tomorrow or anytime. This is a common multi-factor authentication (MFA) fatigue attack, where scammers send repeated push requests to gain access to accounts. Legitimate IT staff will never ask you to approve a Duo push you didn’t initiate. If you receive a suspicious push or message like this, deny the request and report it to your IT security team.